Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/375f3b-945c-4cb6-aa93-08d92e3a6fff/1/FWFTBSCZaflRZ7M57dJ0P3VsY0M.mft
File:                     FWFTBSCZaflRZ7M57dJ0P3VsY0M.mft (raw, json)
Hash identifier:          ddM7g053oHHim4hEhPIZ/k47tIt4uMNoYXqbjHadJEI=
Subject key identifier:   DA:86:94:0C:79:7C:13:D3:3D:13:78:6B:6E:FB:2E:F2:60:6A:B9:5E
Authority key identifier: 15:61:53:05:20:99:69:F9:51:67:B3:39:ED:D2:74:3F:75:6C:63:43
Certificate issuer:       /CN=15615305209969f95167b339edd2743f756c6343
Certificate serial:       018F4FECC79F19A09BAFD0D1FA185C95C496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWFTBSCZaflRZ7M57dJ0P3VsY0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/375f3b-945c-4cb6-aa93-08d92e3a6fff/1/FWFTBSCZaflRZ7M57dJ0P3VsY0M.mft
Manifest number:          0A99
Signing time:             Mon 06 May 2024 22:01:08 +0000
Manifest this update:     Mon 06 May 2024 22:01:08 +0000
Manifest next update:     Tue 07 May 2024 22:01:08 +0000
Files and hashes:         1: FWFTBSCZaflRZ7M57dJ0P3VsY0M.crl (hash: 9VbRGhgHr243aV7nuszo8Zw7OdiX+Y708rntwoGsWLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/375f3b-945c-4cb6-aa93-08d92e3a6fff/1/FWFTBSCZaflRZ7M57dJ0P3VsY0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/375f3b-945c-4cb6-aa93-08d92e3a6fff/1/FWFTBSCZaflRZ7M57dJ0P3VsY0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FWFTBSCZaflRZ7M57dJ0P3VsY0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:ec:c7:9f:19:a0:9b:af:d0:d1:fa:18:5c:95:c4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15615305209969f95167b339edd2743f756c6343
        Validity
            Not Before: May  6 22:01:08 2024 GMT
            Not After : May  7 22:01:08 2024 GMT
        Subject: CN=da86940c797c13d33d13786b6efb2ef2606ab95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:09:73:b4:4a:46:b6:36:72:52:d1:8c:39:
                    3f:94:ca:2b:2d:60:21:08:71:f0:58:d4:24:ca:08:
                    88:5a:19:2b:2c:90:90:49:34:ad:f7:c5:46:e7:7f:
                    a8:51:f2:fc:85:2c:17:1a:90:2f:84:56:ef:4d:cd:
                    5a:2d:35:c7:e1:59:c1:00:f5:8d:38:eb:66:63:4a:
                    b2:87:ee:3e:12:b7:77:31:58:95:d4:af:59:75:77:
                    23:d7:92:9b:fb:5b:d4:0c:51:ba:9f:ad:0b:54:9c:
                    10:9a:af:a8:78:31:98:7a:c6:65:aa:0d:5a:02:1c:
                    76:86:df:77:af:b3:a5:02:ba:9b:c9:d9:a6:ef:e9:
                    de:86:bf:46:7e:9d:b9:1e:84:a1:21:f1:b0:e5:9d:
                    6e:0d:d8:b3:db:7a:91:57:4a:7f:a2:c9:61:e9:08:
                    7f:17:f0:ec:33:e3:24:03:53:bb:f4:42:ec:e1:34:
                    2c:f2:71:8b:a3:3d:17:d5:57:fa:f9:33:7a:88:53:
                    2d:9c:ca:40:7a:0d:61:39:a3:4e:3d:82:d7:0a:11:
                    57:57:72:f2:d7:f9:d8:00:55:f2:79:40:bb:99:52:
                    d2:63:33:c0:54:67:9c:c3:f7:e9:e2:2b:12:51:1d:
                    bf:ed:06:ef:01:a0:46:e1:8f:45:25:ba:70:f0:01:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:94:0C:79:7C:13:D3:3D:13:78:6B:6E:FB:2E:F2:60:6A:B9:5E
            X509v3 Authority Key Identifier:
                keyid:15:61:53:05:20:99:69:F9:51:67:B3:39:ED:D2:74:3F:75:6C:63:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWFTBSCZaflRZ7M57dJ0P3VsY0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/375f3b-945c-4cb6-aa93-08d92e3a6fff/1/FWFTBSCZaflRZ7M57dJ0P3VsY0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/375f3b-945c-4cb6-aa93-08d92e3a6fff/1/FWFTBSCZaflRZ7M57dJ0P3VsY0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:48:88:fa:1b:32:b6:22:f5:c9:46:7b:1c:2d:b3:12:cb:
         64:0a:f6:ce:f0:97:8b:8b:b9:27:5d:b8:ca:d7:6b:31:fc:c3:
         71:9b:35:fd:9a:69:a7:be:29:b1:8d:41:de:b9:52:9b:1d:7a:
         ea:f0:ff:f3:76:01:11:95:b2:2a:75:07:33:fb:9e:7b:8a:0d:
         85:50:94:eb:4c:34:9a:c6:3e:60:a0:f1:c4:3e:1d:fc:b6:6f:
         3e:f1:ee:64:2b:33:0a:47:25:b0:d3:23:45:2c:2e:cc:b2:32:
         42:f2:94:e9:ff:ff:f5:21:42:66:38:6f:05:28:37:5e:dd:aa:
         9b:67:83:70:06:96:32:a8:5f:51:17:0a:4e:b3:22:90:1e:b9:
         38:3b:62:d7:c9:21:84:c3:42:35:e5:14:ca:ec:40:ea:f9:f3:
         e6:a3:df:79:38:93:f5:85:a6:7c:83:06:57:95:0f:6a:fe:9f:
         83:60:3b:9d:0d:b5:cd:c5:58:53:0d:9a:6e:f3:54:2f:3e:cc:
         b1:6a:0c:09:ad:af:d5:c0:75:61:2e:87:56:b3:fa:29:29:e2:
         8d:c8:76:20:ba:9b:6f:ca:06:89:a6:61:3c:a2:8c:25:a1:a8:
         e7:0c:2f:43:b1:56:69:fd:71:1d:61:10:34:53:b2:40:34:0d:
         3b:63:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:51:43 2024 by rpki-client on console-fra.rpki-client.org